helm-chart-4.9.1

Ingress controller for Kubernetes using NGINX as a reverse proxy and load balancer

controller-v1.9.6

Changelog

controller-v1.9.6

Images:

• registry.k8s.io/ingress-nginx/controller:v1.9.6@sha256:1405cc613bd95b2c6edd8b2a152510ae91c7e62aea4698500d23b2145960ab9c
• registry.k8s.io/ingress-nginx/controller-chroot:v1.9.6@sha256:7eb46ff733429e0e46892903c7394aff149ac6d284d92b3946f3baf7ff26a096

All changes:

• update web hook cert gen to latest release v20231226-1a7112e06
• annotation validation: validate regex in common name annotation (#10880)
• change MODSECURITY_VERSION_LIB to 3.0.11 (#10879)
• Include SECLEVEL and STRENGTH as part of ssl-cipher list validation (#10871)

Dependency updates:

• Bump github.com/opencontainers/runc from 1.1.10 to 1.1.11 (#10878)

Full Changelog: controller-v1.9.5...controller-v1.9.6

helm-chart-4.9.0

Ingress controller for Kubernetes using NGINX as a reverse proxy and load balancer

controller-v1.9.5

controller-v1.9.5

Images:

• registry.k8s.io/ingress-nginx/controller:v1.9.5@sha256:b3aba22b1da80e7acfc52b115cae1d4c687172cbf2b742d5b502419c25ff340e
• registry.k8s.io/ingress-nginx/controller-chroot:v1.9.5@sha256:9a8d7b25a846a6461cd044b9aea9cf6cad972bcf2e64d9fd246c0279979aad2d

All changes:

• update nginx build (#10781)
• update images from golang upgrade (#10762)
• fix: remove tcpproxy copy error handling (#10715)
• Ignore fake certificate for NGINXCertificateExpiry (#10694)
• Comment NGINXCertificateExpiry alert label matcher (#10692)
• chart: allow setting allocateLoadBalancerNodePorts (#10693)
• [release-1.9] feat(helm): add documentation about metric args (#10695)
• chore(dep): change lua-resty-cookie's repo (#10691)
• annotation validation - extended URLWithNginxVariableRegex from alphaNumericChars to extendedAlphaNumeric (#10656)
• fix: adjust unfulfillable validation check for session-cookie-samesite annotation (#10604)
• fix: Validate x-forwarded-prefix annotation with RegexPathWithCapture (#10603)
• Increase HSTS max-age to default to one year (#10580)
• [release-1.9] update nginx base, httpbun, e2e, helm webhook cert gen (#10507)
• [release-1.9] add upstream patch for CVE-2023-44487 (#10499)
• fix brotli build issues (#10468)
• upgrade owasp modsecurity core rule set to v3.3.5 (#10437)
• Accept backend protocol on any case (#10461)
• Chart: Rework network policies. (#10438)
• Rework mage (#10418)

Dependency updates:

• Bump x/net (#10517)
• Bump google.golang.org/grpc from 1.58.0 to 1.58.1 (#10436)

Full Changelog: controller-v1.9.4...controller-v1.9.5

helm-chart-4.8.3

Ingress controller for Kubernetes using NGINX as a reverse proxy and load balancer

controller-v1.9.4

Changelog

1.9.4

Images:

• registry.k8s.io/ingress-nginx/controller:v1.9.4@sha256:5b161f051d017e55d358435f295f5e9a297e66158f136321d9b04520ec6c48a3
• registry.k8s.io/ingress-nginx/controller-chroot:v1.9.4@sha256:5976b1067cfbca8a21d0ba53d71f83543a73316a61ea7f7e436d6cf84ddf9b26

All Changes:

• Cherry pick fcgi fix and release v1.9.4 (#10544)

Full Changelog: controller-controller-v1.9.3...controller-controller-v1.9.4

helm-chart-4.8.2

Ingress controller for Kubernetes using NGINX as a reverse proxy and load balancer

helm-chart-4.7.3

Ingress controller for Kubernetes using NGINX as a reverse proxy and load balancer

controller-v1.9.3

Changelog

1.9.3

Images:

• registry.k8s.io/ingress-nginx/controller:v1.9.3@sha256:8fd21d59428507671ce0fb47f818b1d859c92d2ad07bb7c947268d433030ba98
• registry.k8s.io/ingress-nginx/controller-chroot:v1.9.3@sha256:df4931fd6859fbf1a71e785f02a44b2f9a16f010ae852c442e9bb779cbefdc86

All Changes:

• update nginx base, httpbun, e2e, helm webhook cert gen (#10506)
• added warning for configuration-snippets usage (#10492)
• Remove legacy GeoIP from controller (#10495)
• add upstream patch for CVE-2023-44487 (#10494)
• Revert "Remove curl from nginx base image (#10477)" (#10479)
• update error and otel to have all the arch we support (#10476)
• Remove curl from nginx base image (#10477)

Dependencies updates:

• Bump x/net (#10514)
• Bump curl and Go version (#10503)
• Bump google.golang.org/grpc from 1.58.2 to 1.58.3 (#10496)
• Bump github.com/prometheus/client_model (#10486)
• Bump ossf/scorecard-action from 2.2.0 to 2.3.0 (#10487)
• Bump golang.org/x/crypto from 0.13.0 to 0.14.0 (#10485)

Full Changelog: controller-controller-v1.9.1...controller-controller-v1.9.3

controller-v1.8.4

Changelog

1.8.4

Images:

• registry.k8s.io/ingress-nginx/controller:v1.8.4@sha256:8d8ddf32b83ca3e74bd5f66369fa60d85353e18ff55fa7691b321aa4716f5ba9
• registry.k8s.io/ingress-nginx/controller-chroot:v1.8.4@sha256:76100ab4c1b3cdc2697dd26492ba42c6519e99c5df1bc839ac5d6444a2c58d17

All Changes:

• Release v1.8.3 final (#10510)
• Cherry pick image bump and re-add AJP as dynamic module (#10509)
• Release v1.8.2 and Update Go to v1.21.1 (#10379)
• Making auth access logs optional (#10380)
• [release-1.8] Disable Modsecurity from internal processing which affects large ingresses (#10375)
• promote distroless otel init image (#10270)
• [release-1.8] Update images tags after adding git data in gcloud (#10233)
• [release-1.8] Golang 1.20.6 for test runner (#10231)
• release notes 1.8.1 (#10179)

Dependencies updates:

• Bump x/net (#10515)

Full Changelog: controller-controller-v1.8.2...controller-controller-v1.8.4